Serious Discussion New McAfee and what is wrong with it

[Trident]

McAfee offers more aggressive detection and protection on downloads through their download advisor. The blocking of malicious and phishing sites is solid too. McAfee now blocks fully qualified malicious domains and IP addresses system-wide.

All in all, it is ok for an average user.

 

[Trident]

McAfee launches an AI-powered DeepFake detector, classed as “world-first”, alongside Trend Micro.

https://www.mcafee.com/ai

AI powered email protection (scam detection) also in the works, the trial ended recently.

 

[Obsession]

IMHO it's not bad that only on-execution scanning is done. What is malware supposed to do if it's lying around on the disk and never executed? I also always set Eset to on-execution. The speed is fantastic and so far I've never caught anything from it. What is the point of a scan that scans the same file again every time the machine accesses it? I know there are different opinions on this, but the danger is not as great as it is portrayed here, it only consists in the fact that you can copy the file. Files that you receive from strangers (or friends), for example on a USB stick, should be scanned beforehand anyway and not blindly executed. That is where the danger is greater, but in this case the problem is IN FRONT of the screen.

just my 2 cents.

 

[Game Of Thrones]

IMHO it's not bad that only on-execution scanning is done. What is malware supposed to do if it's lying around on the disk and never executed? I also always set Eset to on-execution. The speed is fantastic and so far I've never caught anything from it. What is the point of a scan that scans the same file again every time the machine accesses it? I know there are different opinions on this, but the danger is not as great as it is portrayed here, it only consists in the fact that you can copy the file. Files that you receive from strangers (or friends), for example on a USB stick, should be scanned beforehand anyway and not blindly executed. That is where the danger is greater, but in this case the problem is IN FRONT of the screen.

just my 2 cents.

most antimalware scans local files once and then only scans new files so the impact will be minimal. only geeks scan the USB files, normal people just open the files or copy them and pass them to others, the point is with this on execution scan the chain of attack/infection will go on. As you see with Kaspersky or ESET it is possible to implement a balanced yet powerful policy of scanning and prevention which is still light on resources. with kinds like eset or Kaspersky, you don't need to worry about the performance of on access scan they made a balance by using local detections and cloud detections(hybrid detection which is the best policy and malware detection tactic)

this on execution scan is not logical, malware should be taken care of ASAP, lying around on disk or network or USB devices is not rational. they wanted to make McAfee light but they messed up in this on execution thing

 

[Obsession]

It's not that simple. When you say "only scan new files", consider the following scenario: you download a file, the AV doesn't find anything. You just leave the file in the downloads folder. Then the AV updates its signature, which COULD find a virus in this file, but since it's not newer, it won't be scanned anymore. Even more stupidly, whitelisted files are usually not scanned when they're executed - the file is clean, it's already been scanned.

The hybrid detection you mentioned has nothing to do with on-access or on-execution. One is HOW malware is detected, the other is WHEN malware is detected.

And in that case, it's usually sufficient if the malware is detected BEFORE it's executed.

These are different strategies, each with its own specific advantages and disadvantages. This is simply not a black and white issue, a lot of people have already racked their brains over it.

For example, I don't want an AV that constantly scans the same files and wastes my power and time.

Kaspersky is a completely different issue (in relation to UltraAV), but even there and in ESET there is the option to set it to on-execution (which I have always done, I used to be with Kaspersky for years, then with ESET until six months ago and now with F-Secure and, as a result of a campaign, also with McAfee - but different PCs). With F-Secure (which many people consider to be very easy) I do notice the on-access check. But that's another story.

 

[BSONE]

Trying Mcafee Antivirus now. Nice and simple UI that gets out of your way similar to Windows Security and F-Secure. The Mcafee Webadvisor Chrome extension is responsive and gives green ticks to Website search results. Has very little CPU usage on fast.com and speedtest.net download tests (1000mps/50mps internet). Quite fond of it at the moment.

 

[mlnevese]

Just to add my $0.02 any downloaded file will be scanned on download for malware before being saved. Then only on execution or if a manual scan is triggered.

 

[RoboMan]

IMHO it's not bad that only on-execution scanning is done. What is malware supposed to do if it's lying around on the disk and never executed? I also always set Eset to on-execution. The speed is fantastic and so far I've never caught anything from it. What is the point of a scan that scans the same file again every time the machine accesses it? I know there are different opinions on this, but the danger is not as great as it is portrayed here, it only consists in the fact that you can copy the file. Files that you receive from strangers (or friends), for example on a USB stick, should be scanned beforehand anyway and not blindly executed. That is where the danger is greater, but in this case the problem is IN FRONT of the screen.

just my 2 cents.

Take into account that a malicious file may be actually executed without user interaction. There has been cases where a vulnerability on unzipping software lead to malware exe executing upon user extracting the compressed file. Usually, the triple combo is the safest approach: scan on access, on modification, and on execution.